Prozac Online Buy Antabuse Cipro Online Buy Cymbalta Toprol XL Online Buy Cipro Elimite Online Buy Neurontin Nexium Online Buy Seroquel

SpyFalcon is a malicious program disguised as a spyware protection program. SpyFalcon may take control of your computer and display a menacing security notification on your desktop suggesting that “the system has been stopped to protect you from Spyware” and directs to where you can purchase their software. SpyFalcon has created several SpyFalcon clones that have different spyware names but share the same behaviors; for example, Spysheriff, BraveSentry, Pest Trap, and SpywareStrike.

Automated Detection for SpyFalcon

SpyFalcon Manual Removal Instructions

Stop SpyFalcon system processes:

uninst.exe
spyfalcon.exe
nvctrl.exe
mssearchnet.exe
mscornet.exe
uninst.exedfrgsrv.exe
spyfalcon.exe
nvctrl.exe
mssearchnet.exe
mscornet.exe
dfrgsrv.exe

Unregister SpyFalcon DLLs:

winrge32.dll
wfkduei.dll
bolnyz.dll
higjxe.dll
twain32.dll
reglogs.dll
appmagr.dll
fyhhxw.dll
sbnudh.dll
oerucu.dll
ulztc.dll
htey.dll
iqzv.dll
oqipt.dll
ginuerep.dll
dxmpp.dll

Remove SpyFalcon files:

winrge32.dll
wfkduei.dll
bolnyz.dll
higjxe.dll
SpyFalcon
spyfalcon.lnk
spyfalcon2.0website.lnk
uninstallspyfalcon2.0.lnk
spyfalcon2.0.lnk
english.ini
blacklist.txt
spyfalcon.url
syg.db
ld[X].tmp
twain32.dll
reglogs.dll
appmagr.dll
fyhhxw.dll
sbnudh.dll
oerucu.dll
ulztc.dll
htey.dll
iqzv.dll
oqipt.dll
ginuerep.dll
dxmpp.dll
uninst.exe
spyfalcon.exe
nvctrl.exe
mssearchnet.exe
mscornet.exe
ld[X].tmp, syg.db, spyfalcon.url, blacklist.txt, english.ini, spyfalcon 2.0.lnk, uninstall spyfalcon 2.0.lnk, spyfalcon 2.0.lnk, spyfalcon 2.0 website.lnk, spyfalcon.lnk, spyfalcon 2.0.lnkdfrgsrv.exe

Remove SpyFalcon registry values:

35a88e51-b53d-43e9-b8a7-75d4c31b4676
0c7416f0-dd23-420f-97f5-aae352ea2bf1
336ec37f-54bf-4f13-8237-03f64fa591e7
24c60b9b-26b5-4201-9f7a-fb9219356ae9
89aef01d-d237-49c7-84dc-4e1904c1fd31
6c69e319-0d03-47da-997a-36586cbc53b3
f5947202-e9cb-4a72-88e7-22f2cbd2b124
a0c51615-738a-4542-801a-5af61614e182
SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SharedTaskScheduler\\35a88e51-b53d-43e9-b8a7-75d4c31b4676
SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SharedTaskScheduler\\0c7416f0-dd23-420f-97f5-aae352ea2bf1
SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SharedTaskScheduler\\336ec37f-54bf-4f13-8237-03f64fa591e7
SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SharedTaskScheduler\\24c60b9b-26b5-4201-9f7a-fb9219356ae9
SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SharedTaskScheduler\\89aef01d-d237-49c7-84dc-4e1904c1fd31
SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SharedTaskScheduler\\6c69e319-0d03-47da-997a-36586cbc53b3
SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SharedTaskScheduler\\cbb430e6-5b1b-474a-9d7e-160d4fe74bea
cbb430e6-5b1b-474a-9d7e-160d4fe74bea
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallSpyFalcon
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionAppManagementARPCacheSpyFalcon
244B730E-D899-4E38-9428-03D1143242E0
D1A2E7CD-F5C1-21A8-CA2C-13D0AC72D19D
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionUninstallSpyFalconHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunSpyFalcon
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionApp ManagementARPCacheSpyFalcon
HKEY_LOCAL_MACHINE SOFTWAREClassesTypeLib{244B730E-D899-4E38-9428-03D1143242E0}
HKEY_CURRENT_USER SOFTWAREClassesCLSID{D1A2E7CD-F5C1-21A8-CA2C-13D0AC72D19D}
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionExplorerSharedTaskScheduler{D1A2E7CD-F5C1-21A8-CA2C-13D0AC72D19D}
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionRunSpyFalcon

Important Disclaimer

SpyFalcon is related to:

  » MediaCodec

  » SpyContra

  » Adware Punisher

This entry was posted on Monday, July 10th, 2006 at 1:38 pm and is filed under Rogue Anti-Spyware Program, Trojans. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.